Red Hat Security Advisory: Satellite 6.18.4 Async Update

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2026-0980 — rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username CVE-2026-1531 — foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification CVE-2026-1961 — forman: Foreman: Remote Code Execution via command injection in WebSocket proxy CVE-2026-4324 — rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection